The domain 3acwn.trackvoluum.com registered by Super Privacy Service c/o Dynadot was initially registered in June of 2013 through DYNADOT, LLC. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Super Privacy Service c/o Dynadot
Server location:
Virginia, United States (US)
Create date:
Friday, June 28, 2013
Expires date:
Tuesday, June 28, 2022
Updated date:
Monday, December 14, 2015
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.Fileangels.L, PUP.Adknowledge.Fileangels.Bundler (M), PUP.Adknowledge.Kickpattern.Bundler (M), PUP.Adknowledge.SafeDown.Bundler (M), PUP.Adknowledge.Fileprotected.Installer (M), PUP.Adknowledge.Fileprot.Installer (M), PUP.Adknowledge (M)
100.00%
AVG
Adware AdPlugin.BOV
16.67%
Dr.Web
Trojan.DownLoader11.38739, Trojan.iBryte.521
16.67%
VIPRE Antivirus
Threat.4778314
16.67%
McAfee
IBryte-FRT, Program.IBryte-FRT
16.67%
Malwarebytes
PUP.Optional.OptimunInstaller, PUP.Optional.PremiumInstaller
16.67%
Zillya! Antivirus
Adware.iBryte.Win32.3434, Adware.iBryte.Win32.2774
16.67%
K7 AntiVirus
Adware
16.67%
NANO AntiVirus
Riskware.Win32.IBryte.dhbrit, Trojan.Win32.Badur.dgvzuh
16.67%
F-Prot
W32/A-71902d70, W32/A-46bd47dc
16.67%
Kaspersky
not-a-virus:AdWare.Win32.iBryte
16.67%
Comodo Security
Application.Win32.IBryte.BO, Application.Win32.iBryte.KO
16.67%
Sophos
iBryte Premium Installer, PUA 'iBryte Optimum Installer'
16.67%
Avira AntiVirus
ADWARE/iBryte.Gen4, ADWARE/iBryte.bxpc
16.67%
G Data
Win32.Adware.IBryte, Gen:Variant.Application.Bundler.25
16.67%
The domain 3acwn.trackvoluum.com has been seen to resolve to the following 13 IP addresses.
ec2-52-22-227-193.compute-1.amazonaws.com
September 1, 2016
ec2-52-22-240-225.compute-1.amazonaws.com
May 16, 2016
ec2-52-72-150-228.compute-1.amazonaws.com
May 16, 2016
ec2-54-165-90-204.compute-1.amazonaws.com
February 13, 2016
ec2-52-20-94-168.compute-1.amazonaws.com
February 13, 2016
ec2-54-173-35-140.compute-1.amazonaws.com
February 13, 2016
ec2-54-236-186-201.compute-1.amazonaws.com
December 26, 2015
ec2-52-22-88-81.compute-1.amazonaws.com
December 26, 2015
ec2-107-23-41-125.compute-1.amazonaws.com
December 26, 2015
ec2-52-5-253-65.compute-1.amazonaws.com
December 2, 2015
ec2-54-209-201-192.compute-1.amazonaws.com
December 2, 2015
ec2-52-22-183-105.compute-1.amazonaws.com
December 2, 2015
ec2-54-209-210-98.compute-1.amazonaws.com
November 10, 2014
File downloads found at URLs served by 3acwn.trackvoluum.com.
The following 3 files have been seen to comunicate with 3acwn.trackvoluum.com in live environments.
URL:
http://3acwn.trackvoluum.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
SSL certificate subject:
CN=*.trackvoluum.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)13, OU=GT89093649, SERIALNUMBER=tIMieP0cKNC4pSv-3uXEDsTTozrJ1u8p
SSL certificate issuer:
CN=RapidSSL CA, O="GeoTrust, Inc.", C=US
Web server:
Voluum-Traffic/1.0
Statistics are for the previous month.